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This listing of claims replaces all prior versions, and 
listings of claims in the instant application: 

Listing of Claims; 
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1. (Previously Presented) A method for digital content 
access control, comprising: 

receiving, by a rights locker provider, a rights 
locker enrollment request from a user device associated 
with a user, said rights locker enrollment request 
comprising a digital content request and enrollment 
authentication data; 

determining, by said rights locker provider, whether 
said user is authorized using said enrollment 
authentication data, said determining comprising 
determining rights of said user to access said rights 
locker and rights of said user to digital content 
specified by said digital content request wherein said 
rights locker provides (1) a description of a user's 
access rights for digital content; and (2) controlled 
access to said description; and 
if said user is authorized, 

initializing, by said rights locker provider, 
said rights locker with rights to said digital 
content ; 

obtaining, by said rights locker provider, a new 
token that authenticates future access to said rights 
locker corresponding to said digital content; 

creating, by said rights locker provider, an 
authenticated rights locker access request based at 
least in part on said new token; and 

sending, by said rights locker provider, said 
authenticated rights locker access request over a 
network to said user device. 
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2. (Original) The method of claim 1 wherein said digital 
content request comprises a request for initializing said 
rights locker with rights to specified digital content. 

3. (Original) The method of claim 1 wherein said 
enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to access 
said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

4. (Original) The method of claim 3 wherein said rights 
locker access authentication data comprises payment for use of 
a rights locker service. 

5. (Original) The method of claim 3 wherein said rights 
content access authentication data comprises payment for rights 
deposited in said rights locker. 

6. (Original) The method of claim 1 wherein said 
enrollment authentication data comprises a reenrollment key 
determined in a previous enrollment request for said rights 
locker, said reenrollment key for supplementing or replacing 
enrollment authentication data of said previous enrollment 
request . 
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7. (Original) The method of claim 1 wherein said 
determining comprises determining whether said user is entitled 
to become an enrolled user based at least in part on whether 
payment for use of the rights locker service succeeds. 
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8. (Original) The method of claim 1 wherein said 
determining comprises determining whether an enrolled user is 
entitled to populate said rights locker with rights to said 
digital content based at least in part on whether payment for 
said rights succeeds. 

9. (Original) The method of claim 1 wherein said new 
token is for storage in a bookmark on said user device. 

10. (Original) The method of claim 1 wherein said 
sending further comprises embedding said authenticated rights 
locker access request in a Web cookie before said sending. 

11. (Previously Presented) The method of claim 1 wherein 
said sending further comprises encapsulating said authenticated 
rights locker access request in an HyperText Transfer Protocol 
Response message before said sending. 
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12. (Previously Presented) A method for digital content 
access control, comprising: 

receiving, by a rights locker provider, a first 
authenticated rights locker access request and a digital 
content specification from a user device associated with a 
user wherein said rights locker provides (1) a description 
of a user's access rights for digital content; and (2) 
controlled access to said description; 

validating, by said rights locker provider, said first 
authenticated rights locker access request; 

if said validating indicates said first authenticated 
rights locker access request is valid, 

creating, by said rights locker provider, an 

authenticated digital content request for use in 

accessing digital content stored by a digital content 

repository; 
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if a first token used to create said authenticated 
rights locker access request has been fully redeemed, 
obtaining, by said rights locker provider, a new token 
that authenticates future access to a rights locker 
corresponding to said digital content; 

creating, by said rights locker provider, a new 
authenticated rights locker access request based at 
least in part on said new token; and 

sending, by said rights locker provider, said 
authenticated digital content request and said new 
authenticated rights locker access request over a 
network to said user device. 



13. (Original) The method of claim 12 wherein said 
receiving further comprises receiving one or more delivery 
parameters, said one or more delivery parameters indicating 
where said digital content should be sent, a delivery 
mechanism, or both. 



14. (Original) The method of claim 12 wherein said new 
token is for storage in a bookmark on a user device. 



15. (Original) The method of claim 12, further 
comprising embedding said authenticated rights locker access 
request in a Web cookie before said sending. 

16. (Previously Presented) The method of claim 12, 
further comprising encapsulating said authenticated rights 
locker access request in an HyperText Transfer Protocol 
Response message before said sending. 
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17. (Previously Presented) A method for digital content 
access control, comprising: 
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receiving, by a rights locker provider, a first 
authenticated rights locker access request and a digital 
content specification from a user device associated with a 
user wherein said rights locker provides (1) a description 
of a user's access rights for digital content; and (2) 
controlled access to said description; 

validating, by said rights locker provider, said 
first authenticated rights locker access request; 

if said validating indicates said first authenticated 
rights locker access request is valid, 

creating, by said rights locker provider, an 
authenticated digital content request for use in 
accessing digital content stored by a digital 
content repository; 

sending, by said rights locker provider, said 
authenticated digital content request to said 
digital content repository; 

if a first token used to create said 
authenticated rights locker access request has been 
fully redeemed, obtaining, by said rights locker 
provider, a new token that authenticates future 
access to a rights locker corresponding to said 
digital content; 

creating, by said rights locker provider, a 
new authenticated rights locker access request 
based at least in part on said new token; and 
sending, by said rights locker provider, 
said new authenticated rights locker access 
request to said user device over a network. 



18. (Original) The method of claim 17 wherein said 
receiving further comprises receiving one or more delivery 
parameters, said one or more delivery parameters indicating 
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where said digital content should be sent, a delivery 
mechanism, or both. 

19. (Original) The method of claim 17 wherein said new 
token is for storage in a bookmark on a user device. 

20. (Original) The method of claim 17, further 
comprising embedding said authenticated rights locker access 
request in a Web cookie before said sending. 

21. (Previously Presented) The method of claim 17, 
further comprising encapsulating said authenticated rights 
locker access request in an HyperText Transfer Protocol 
Response message before said sending. 



GUNNISON. McKAY & 

HODGSON. L.L.P. 
Garden West Office Plaza 
1900 Garden Road. Suite 220 
Monterey. CA 93940 

(831)655-0880 
F» (831)655-0588 



22. (Previously Presented) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for digital 
content access control, the method comprising: 

receiving, by a rights locker provider, a rights 
locker enrollment request from a user device associated 
with a user, said rights locker enrollment request 
comprising a digital content request and enrollment 
authentication data; 

determining, by said rights locker provider, whether 
said user is authorized using said enrollment 
authentication data, said determining comprising 
determining rights of said user to access said rights 
locker and rights of said user to digital content 
specified by said digital content request wherein said 
rights locker provides (1) a description of a user's 
access rights for digital content; and (2) controlled 
access to said description; and 
if said user is authorized, 
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initializing, by said rights locker provider, 
said rights locker with rights to said digital 
content ; 

obtaining, by said rights locker provider, a new 
token that authenticates future access to said rights 
locker corresponding to said digital content; 

creating, by said rights locker provider, an 
authenticated rights locker access request based at 
least in part on said new token; and 

sending, by said rights locker provider, said 
authenticated rights locker access request over a 
network to said user device. 



23. (Original) The program storage device of claim 22 
wherein said digital content request comprises a request for 
initializing said rights locker with rights to specified 
digital content. 

24. (Original) The program storage device of claim 22 
wherein said enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to access 
said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

25. (Original) The program storage device of claim 24 
wherein said rights locker access authentication data comprises 
payment for use of a rights locker service. 
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26. (Original) The program storage device of claim 24 
wherein said rights content access authentication data 
comprises payment for rights deposited in said rights locker. 
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27. (Original) The program storage device of claim 22 
wherein said enrollment authentication data comprises a 
reenrollment key determined in a previous enrollment request 
for said rights locker, said reenrollment key for supplementing 
or replacing enrollment authentication data of said previous 
enrollment request . 

28. (Original) The program storage device of claim 22 
wherein said determining comprises determining whether said 
user is entitled to become an enrolled user based at least in 
part on whether payment for use of the rights locker service 
succeeds . 



29. (Original) The program storage device of claim 22 
wherein said determining comprises determining whether an 
enrolled user is entitled to populate said rights locker with 
rights to said digital content based at least in part on 
whether payment for said rights succeeds. 

30. (Original) The program storage device of claim 22 
wherein said new token is for storage in a bookmark on said 
user device. 



31. (Original) The program storage device of claim 22, 
said method further comprising embedding said authenticated 
rights locker access request in a Web cookie before said 
sending . 
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32. (Previously Presented) The program storage device of 
claim 22, said method further comprising encapsulating said 
authenticated rights locker access request in an HyperText 
Transfer Protocol Response message before said sending. 
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33. (Previously Presented) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for digital 
content access control, the method comprising: 

receiving, by a rights locker provider, a first 
authenticated rights locker access request and a digital 
content specification from a user device associated with a 
user wherein said rights locker provides (1) a description 
of a user's access rights for digital content; and (2) 
controlled access to said description; 

validating, by said rights locker provider, said 
first authenticated rights locker access request; 

if said validating indicates said first authenticated 
rights locker access request is valid, 

creating, by said rights locker provider, an 
authenticated digital content request for use in 
accessing digital content stored by a digital content 
repository; 

if a first token used to create said 
authenticated rights locker access request has been 
fully redeemed, obtaining, by said rights locker 
provider, a new token, that authenticates future 
access to a rights locker corresponding to said 
digital content; 

creating, by said rights locker provider, a new 
authenticated rights locker access request based at 
least in part on said new token; and 

sending, by said rights locker provider, said 
authenticated digital content request and said new 
authenticated rights locker access request over a 
network to said user device. 
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34. (Original) The program storage device of claim 33 
wherein said receiving further comprises receiving one or more 
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delivery parameters, said one or more delivery parameters 
indicating where said digital content should be sent, a 
delivery mechanism, or both. 



35. (Original) The program storage device of claim 33 
wherein said new token is for storage in a bookmark on a user 
device . 



36. (Original) The program storage device of claim 33, 
said method further comprising embedding said authenticated 
rights locker access request in a Web cookie before said 
sending. 

37. (Previously Presented) The program storage device of 
claim 33, said method further comprising encapsulating said 
authenticated rights locker access request in an HyperText 
Transfer Protocol Response message before said sending. 
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38. (Previously Presented) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for digital 
content access control, the method comprising: 

receiving, by a rights locker provider, a first 
authenticated rights locker access request and a digital 
content specification from a user device associated with a 
user wherein said rights locker provides (1) a description 
of a user's access rights for digital content; and (2) 
controlled access to said description; 

validating, by said rights locker provider, said 
first authenticated rights locker access request; 

if said validating indicates said first authenticated 
rights locker access request is valid, 

creating, by said rights locker provider, an 
authenticated digital content request for use in 
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accessing digital content stored by a digital 
cont ent r epo s i t ory ; 

sending, by said rights locker provider, said 
authenticated digital content request to said 
digital content repository; 

if a first token used to create said 
authenticated rights locker access request has been 
fully redeemed, obtaining, by said rights locker 
provider, a new token that authenticates future 
access to a rights locker corresponding to said 
digital content ; 

creating, by said rights locker provider, a new 
authenticated rights locker access request based at 
least in part on said new token; and 

sending, by said rights locker provider, said 
new authenticated rights locker access request to 
said user device over a network. 

39. (Original) The program storage device of claim 3 8 
wherein said receiving further comprises receiving one or more 
delivery parameters, said one or more delivery parameters 
indicating where said digital content should be sent, a 
delivery mechanism, or both. 

40. (Original) The program storage device of claim 38 
wherein said new token is for storage in a bookmark on a user 
device . 



41. (Original) The program storage device of claim 38, 
said method further comprising embedding said authenticated 
rights locker access request in a Web cookie before said 
sending . 
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42. (Previously Presented) The program storage device of 
claim 38, said method further comprising encapsulating said 
authenticated rights locker access request in an HyperText 
Transfer Protocol Response message before said sending. 
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43. (Previously Presented) An apparatus for digital 
content access control, comprising: 

means for receiving, by a rights locker provider, a 
rights locker enrollment request from a user device 
associated with a user, said rights locker enrollment 
request comprising a digital content request and 
enrollment authentication data; 

means for determining, by said rights locker 
provider, whether said user is authorized using said 
enrollment authentication data, said determining 
comprising determining rights of said user to access said 
rights locker and rights of said user to digital content 
specified by said digital content request wherein said 
rights locker provides (1) a description of a user's 
access rights for digital content; and (2) controlled 
access to said description; and 

means for if said user is authorized, 

initializing, by said rights locker provider, 
said rights locker with' rights to said digital 
content; 

obtaining, by said rights locker provider, a new 
token that authenticates future access to said rights 
locker corresponding to said digital content; 

creating, by said rights locker provider, an 
authenticated rights locker access request based at 
least in part on said new token; and 

sending, by said rights locker provider, said 
authenticated rights locker access request over a 
network to said user device 
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44. (Original) The apparatus of claim 43 wherein said 
digital content request comprises a request for initializing 
said rights locker with rights to specified digital content. 

45. (Original) The apparatus of claim 43 wherein said 
enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to access 
said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

46. (Original) The apparatus of claim 45 wherein said 
rights locker access authentication data comprises payment for 
use of a rights locker service. 

47. (Original) The apparatus of claim 45 wherein said 
rights content access authentication data comprises payment for 
rights deposited in said rights locker. 

48. (Original) The apparatus of claim 43 wherein said 
enrollment authentication data comprises a reenrollment key 
determined in a previous enrollment request for said rights 
locker, said reenrollment key for supplementing or replacing 
enrollment authentication data of said previous enrollment 
request . 
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49. (Original) The apparatus of claim 43 wherein said 
means for determining comprises means for determining whether 
said user is entitled to become an enrolled user based at least 
in part on whether payment for use of the rights locker service 
succeeds . 
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50. (Original) The apparatus of claim 43 wherein said 
means for determining comprises means for determining whether 
an enrolled user is entitled to populate said rights locker 
with rights to said digital content based at least in part on 
whether payment for said rights succeeds. 

51. (Original) The apparatus of claim 43 wherein said 
new token is for storage in a bookmark on said user device. 

52. (Original) The apparatus of claim 43, further 
comprising means for embedding said authenticated rights locker 
access request in a Web cookie before said sending. 

53. (Previously Presented) The apparatus of claim 43, 
further comprising mans for encapsulating said authenticated 
rights locker access request in an HyperText Transfer Protocol 
Response message before said sending. 
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54. (Previously Presented) An apparatus for digital 
content access control, comprising: 

means for receiving, by a rights locker provider, a 
first authenticated rights locker access request and a 
digital content specification from a user device 
associated with a user wherein said rights locker provides 
(1) a description of a user's access rights for digital 
content; and (2) controlled access to said description; 

means for validating, by said rights locker provider, 
said first authenticated rights locker access request; 

means for if said validating indicates said first 
authenticated rights locker access request is valid, 

creating, by said rights locker provider, an 

authenticated digital content request for use in 
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accessing digital content stored by a digital content 
repository; 

if a first token used to create said 
authenticated rights locker access request has been 
fully redeemed, obtaining, by said rights locker 
provider, a new token that authenticates future 
access to a rights locker corresponding to said 
digital content; 

creating, by said rights locker provider, a new 
authenticated rights locker access request based at 
least in part on said new token; and 

sending, by said rights locker provider, said 
authenticated digital content request and said new 
authenticated rights locker access request over a 
network to said user device. 



55. (Original) The apparatus of claim 54 wherein said 
means for receiving further comprises means for receiving one 
or more delivery parameters, said one or more delivery 
parameters indicating where said digital content should be 
sent, a delivery mechanism, or both. 

56. (Original) The apparatus of claim 54 wherein said 
new token is for storage in a bookmark on a user device. 

57. (Original) The apparatus of claim 54, further 
comprising means for embedding said authenticated rights locker 
access request in a Web cookie before said sending. 
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58. (Previously Presented) The apparatus of claim 54, 
further comprising means for encapsulating said authenticated 
rights locker access request in an HyperText Transfer Protocol 
Response message before said sending. 
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59. (Previously Presented) An apparatus for digital 
content access control, comprising: 

means for receiving, by a rights locker provider, a 
first authenticated rights locker access request and a 
digital content specification from a user device 
associated with a user wherein said rights locker provides 
(1) a description of a user's access rights for digital 
content; and (2) controlled access to said description; 

means for validating, by said rights locker provider, 
said first authenticated rights locker access request; 

means for if said validating indicates said first 
authenticated rights locker access request is valid, 

creating, by said rights locker provider, an 
authenticated digital content request for use in 
accessing digital content stored by a digital 
content repository; 

sending, by said rights locker provider, said 
authenticated digital content request to said 
digital content repository; 

if a first token used to create said 
authenticated rights locker access request has been 
fully redeemed, obtaining, by said rights locker 
provider, a new token that authenticates future 
access to a rights locker corresponding to said 
digital content; 

creating, by said rights locker provider, a 
new authenticated rights locker access request 
based at least in part on said new token; and 
sending, by said rights locker provider, 
said new authenticated rights locker access 
request to said user device over a network. 
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60. (Original) The apparatus of claim 59 wherein said 
means for receiving further comprises means for receiving one 
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or more delivery parameters, said one or more delivery 
parameters indicating where said digital content should be 
sent, a delivery mechanism, or both. 



61. (Original) The apparatus of claim 59 wherein said 
new token is for storage in a bookmark on a user device. 

62. (Original) The apparatus of claim 59, further 
comprising means for embedding said authenticated rights locker 
access request in a Web cookie before said sending. 

63. (Previously Presented) The apparatus of claim 59, 
further comprising means for encapsulating said authenticated 
rights locker access request in an HyperText Transfer Protocol 
Response message before said sending. 
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64. (Currently Amended) A rights locker provider 
apparatus for digital content access control, comprising: 
a memory for storing one or more rights lockers 
wherein each of said one or more rights lockers provides 
(1) a description of a user's access rights for digital 
content; and (2) controlled access to said description; 
and 

a processor configured to: 

receive a rights locker enrollment request from 
a user device associated with a user, said rights 
locker enrollment request comprising a digital 
content request and enrollment authentication data; 

determine whether said user is authorized using 
said enrollment authentication data, said determining 
comprising determining rights of said user to access 
said rights locker and rights of said user to digital 
content specified by said digital content request; 
and 



Page 18 of 25 



Appl. NO. 10/687,415 
Amdt. dated April 3, 2008 

Reply to Notice of Allowance of January 14, 2008 



if said user is authorized, 

initialize said rights locker with rights 
to said digital content; 

obtain a new token that authenticates 
future access to said rights locker 
corresponding to said digital content; 

create an authenticated rights locker 
access request based at least in part on said 
new token; and 

send said authenticated rights locker 
access request over a network to said user 
device. 

65. (Original) The apparatus of claim 64 wherein said 
digital content request comprises a request for initializing 
said rights locker with rights to specified digital content. 

66. (Original) The apparatus of claim 64 wherein said 
enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to access 
said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

67. (Original) The apparatus of claim 66 wherein said 
rights locker access authentication data comprises payment for 
use of a rights locker service. 
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68. (Original) The apparatus of claim 66 wherein said 
rights content access authentication data comprises payment for 
rights deposited in said rights locker. 
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69. (Original) The apparatus of claim 66 wherein said 
enrollment authentication data comprises a reenrollment key 
determined in a previous enrollment request for said rights 
locker, said reenrollment key for supplementing or replacing 
enrollment authentication data of said previous enrollment 
request . 

70. (Original) The apparatus of claim 64 wherein said 
determining comprises determining whether said user is entitled 
to become an enrolled user based at least in part on whether 
payment for use of the rights locker service succeeds. 

71. (Original) The apparatus of claim 64 wherein said 
determining comprises determining whether an enrolled user is 
entitled to populate said rights locker with rights to said 
digital content based at least in part on whether payment for 
said rights succeeds. 

72. (Original) The apparatus of claim 64 wherein said 
new token is for storage in a bookmark on said user device. 

73. (Original) The apparatus of claim 64 wherein said 
processor is further configured to embed said authenticated 
rights locker access request in a Web cookie before said 
sending. 

74. (Previously Presented) The apparatus of claim 64 
wherein said processor is further configured to encapsulate 
said authenticated rights locker access request in an HyperText 
Transfer Protocol Response message before said sending. 
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75. (Previously Presented) A rights locker provider 
apparatus for digital content access control, comprising: 
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a memory for storing one or more rights lockers 
wherein each of said one or more rights lockers provides 
(1) a description of a user's access rights for digital 
content; and (2) controlled access to said description; 
and 

a processor configured to: 

receive a first authenticated rights locker 

access request and a digital content specification 

from a user device associated with a user; 

validate said first authenticated rights locker 

access request ; 

if said validation indicates said first 

authenticated rights locker access request is valid, 
create an authenticated digital content 
request for use in accessing digital content 
stored by a digital content repository; 

if a first token used to create said 
authenticated rights locker access request has 
been fully redeemed, obtain a new token that 
authenticates future access to a rights locker 
corresponding to said digital content; 

create a new authenticated rights locker 
access request based at least in part on said 
new token; and 

send said authenticated digital content 
request and said new authenticated rights locker 
access request over a network to said user 
device . 
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76. (Original) The apparatus of claim 75 wherein said 
apparatus is further configured to receive one or more delivery 
parameters, said one or more delivery parameters indicating 
where said digital content should be sent, a delivery 
mechanism, or both. 
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77. (Original) The apparatus of claim 75 wherein said 
new token is for storage in a bookmark on a user device. 

78. (Original) The apparatus of claim 75 wherein said 
processor is further configured to embed said authenticated 
rights locker access request in a Web cookie before said 
sending . 

79. (Previously Presented) The apparatus of claim 75 
wherein said processor is further configured to encapsulate 
said authenticated rights locker access request in an HyperText 
Transfer Protocol Response message before said sending. 
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80. (Previously Presented) An apparatus for digital 
content access control, comprising: 

a memory for storing one or more rights lockers 
wherein each of said one or more rights lockers provides 
(1) a description of a user's access rights for digital 
content; and (2) controlled access to said description; 
and 

a processor configured to: 

receive a first authenticated rights locker 
access request and a digital content specification 
from a user device associated with a user; 

validate said first authenticated rights locker 
access request; 

if said validation indicates said first 
authenticated rights locker access request is valid, 
create an authenticated digital content 

request for use in accessing digital content 

stored by a digital content repository; 

send said authenticated digital content 

request to a digital content repository; 
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if a first token used to create said 
authenticated rights locker access request has 
been fully redeemed, obtain a new token that 
authenticates future access to a rights locker 
corresponding to said digital content; 

create a new authenticated rights locker 
access request based at least in part on said 
new token; and 

send said new authenticated rights locker 
access request to said user device over a 
network. 



81. (Original) The apparatus of claim 80 wherein said 
apparatus is further configured to receive one or more delivery 
parameters, said one or more delivery parameters indicating 
where said digital content should be sent, a delivery 
mechanism, or both. 



82. (Original) The apparatus of claim 80 wherein said 
new token is for storage in a bookmark on a user device. 

83. (Original) The apparatus of claim 80 wherein said 
processor is further configured to embed said authenticated 
rights locker access request in a Web cookie before said 
sending. 



84. (Previously Presented) The apparatus of claim 80 
wherein said processor is further configured to encapsulate 
said authenticated rights locker access request in an HyperText 
Transfer Protocol Response message before said sending. 



85. (Cancelled) 
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86. (Cancelled) 
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87. (Cancelled) 

88. (Cancelled) 

89. (Cancelled) 

90. (Cancelled) 
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